CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability

Critical severity · published Sep 19, 2023

CVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

RansomwareIn wildKEV

9.8

CVSS

100%

EPSS

Yes

On KEV

Description

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)100.0% · higher than 100% of CVEs

Exploited in the wildYes

CISA KEVListed Oct 4, 2023

Federal remediation dueOct 25, 2023

Ransomware campaign useKnown

Affected products

Which versions

TeamCity · JetBrains

before 2023.05.4 · source: vendor, NVD, KEV

Affected product

TeamCity

JetBrains

All TeamCity CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-42793

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-42793

CISA KEV catalogue

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

www.jetbrains.com

https://www.jetbrains.com/privacy-security/issues-fixed/

blog.jetbrains.com

https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/

packetstormsecurity.com

http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

attackerkb.com

https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793

www.securityweek.com

https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/

www.rapid7.com

https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/